
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File: xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier: /n2b/kgp4+koejeUygnGHNwZukapVVa8l5HQEFf53J0=
Subject key identifier: D2:78:EE:1D:FB:8D:29:2C:F9:7A:51:FF:D7:EE:2C:3F:EE:E8:59:DE
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer: /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial: 029C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number: 029B
Signing time: Wed 17 Sep 2025 03:56:16 +0000
Manifest this update: Wed 17 Sep 2025 03:56:15 +0000
Manifest next update: Fri 19 Sep 2025 03:56:15 +0000
Files and hashes: 1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: QcxdKyE3xo+1djyAG01N0H8X+3riBQqQK2rBhoiDaBs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 03:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Validity
Not Before: Sep 17 03:56:15 2025 GMT
Not After : Sep 19 03:56:15 2025 GMT
Subject: CN=68ca3160-ae3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:58:e2:e9:28:c5:72:1e:6b:07:01:5f:28:
73:c0:17:6c:1a:08:24:7b:e3:a6:96:45:af:21:0b:
ec:95:1d:86:65:fb:85:26:b6:32:a6:36:e6:7a:f2:
a7:6e:f4:68:65:3f:53:b6:cc:fe:d9:26:0a:b0:ac:
1c:ed:ae:c2:81:cc:bb:45:21:8b:bd:7a:29:75:f8:
3c:f8:3f:16:58:5c:d1:cb:2b:90:1a:86:b9:cc:2e:
8d:ae:ca:81:be:47:5e:8a:49:da:4b:03:56:82:e5:
b4:ca:07:08:d8:00:59:9f:40:ee:f1:a3:c9:76:d2:
fa:8a:f1:d5:7b:b8:85:9c:73:cb:a5:1f:6d:a2:43:
b0:87:3a:f8:f2:5c:a8:d9:28:66:1a:6f:52:88:cb:
79:e6:67:07:a4:ab:04:52:a6:f4:7b:26:4c:c5:43:
23:b0:5a:53:98:4b:32:14:2d:1e:ea:58:89:ac:50:
31:7c:14:35:a4:3f:68:60:ad:5b:9f:cb:39:18:f8:
5c:7d:e4:38:12:da:62:cf:88:0e:d6:a0:09:db:84:
5b:17:ce:a4:92:9d:a2:dd:5b:30:01:d0:6b:fd:6d:
f1:bb:42:75:ff:c2:b2:2e:b5:15:49:5d:36:bc:d2:
49:be:89:14:8e:1f:83:89:5a:ab:c7:4d:d6:30:72:
f1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:78:EE:1D:FB:8D:29:2C:F9:7A:51:FF:D7:EE:2C:3F:EE:E8:59:DE
X509v3 Authority Key Identifier:
keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:0b:50:0e:c9:88:c0:37:f7:2f:41:ee:ec:98:d7:13:2e:35:
a5:67:2b:03:05:6d:f3:74:ab:5e:ff:8b:79:09:fb:78:52:f5:
9a:13:26:66:96:27:2b:5b:4a:74:fa:00:88:0f:f2:cc:71:12:
a8:1e:17:0d:48:a9:7a:a7:c6:26:7e:62:2b:07:8f:be:92:d4:
9f:16:9c:57:78:04:b6:64:70:77:07:87:93:9c:f4:f1:51:2d:
32:cf:7c:b1:59:67:ed:7e:da:b9:d3:a7:41:95:16:ca:42:54:
03:b9:32:b1:ce:c8:23:e6:09:11:39:4d:63:7c:54:84:19:8e:
17:11:5a:15:64:86:cd:29:f5:7a:05:e3:c3:19:29:1f:ac:49:
05:f0:d1:d9:1f:d4:dc:fc:60:35:3d:6e:aa:c6:97:b2:23:00:
9b:3c:8b:1a:22:eb:a7:db:2e:49:ee:ea:4f:48:77:0d:7c:4a:
9c:f2:bc:21:71:9f:0b:b5:da:07:87:2a:cd:cb:eb:3e:e2:94:
17:6e:b7:5a:87:83:a4:fe:b2:af:62:3c:a3:7d:e4:de:4a:e3:
30:34:57:55:10:e2:dd:9d:a8:86:3f:cb:96:6e:13:03:ac:96:
83:0b:97:e0:34:78:6f:fd:66:a5:c6:0c:44:81:7f:69:95:e1:
2a:94:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:40:34 2025 by rpki-client